İçeriğe geç
Bilgi ve Teknoloji Uygulamada aç

Yüksek CVSS 8.1

CVE-2016-1181: Banking Platform: güvenlik açığı

Yayın: · Güncelleme:

Açıklama (NVD)

ActionServlet.java in Apache Struts 1 1.x through 1.3.10 mishandles multithreaded access to an ActionForm instance, which allows remote attackers to execute arbitrary code or cause a denial of service (unexpected memory access) via a multipart request, a related issue to CVE-2015-0899.

Özet bilgiler

Ürün
Oracle Banking Platform
CVSS v3.1
8.1 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
%12,71 (yüzdelik 96)
Yama
Mevcut

Etkilenen sürümler

ÜrünBaşlangıçBitişDüzeltildi
oracle-banking-platform2.3.02.3.0—
oracle-banking-platform2.4.02.4.0—
oracle-banking-platform2.4.12.4.1—
oracle-banking-platform2.5.02.5.0—
oracle-portal11.1.1.611.1.1.6—
apache-struts1.01.0—
apache-struts1.01.0—
apache-struts1.01.0—
apache-struts1.01.0—
apache-struts1.0.11.0.1—
apache-struts1.0.21.0.2—
apache-struts1.11.1—
apache-struts1.11.1—
apache-struts1.11.1—
apache-struts1.11.1—
apache-struts1.11.1—
apache-struts1.11.1—
apache-struts1.2.01.2.0—
apache-struts1.2.11.2.1—
apache-struts1.2.21.2.2—
apache-struts1.2.31.2.3—
apache-struts1.2.41.2.4—
apache-struts1.2.51.2.5—
apache-struts1.2.61.2.6—
apache-struts1.2.71.2.7—
apache-struts1.2.81.2.8—
apache-struts1.2.91.2.9—
apache-struts1.3.51.3.5—
apache-struts1.3.61.3.6—
apache-struts1.3.71.3.7—

Kaynaklar

Uygulamada aç Tüm CVE kayıtları